学步园

I did not write the blog for a long time. These days, i use the google doc and note to record. I love them very much:) But there is a disadvantage in google doc, it does not support syntax highlight, so i think i have to write here. Fortunately, CSDN has support search in blog.

I have finished the virtual disk driver on the mobile recently. It can encrypt the data in devices automatically without user intervention, providing a user-transparent yet fully-enforceable security policy. I use the fat FS to implement the virtual disk, Before write every sector, encrypt data with aes, and decrypt before read. I

user password's MD5 to make aes key.

That code like this:

if (!(ReadNotWrite))<br /> {<br /> RETAILMSG(1,(L"blockEncrypt/n"));<br /> //int blockEncrypt(cipherInstance *cipher, keyInstance *key,<br /> // BYTE *input, int inputLen, BYTE *outBuffer);<br /> //RETAILMSG(1,(L"1111blockEncrypt ---- Buffer = %x tmpBuffer = %x/n",Buffer, tmpBuffer));<br /> /*if (*/blockEncrypt(&(DeviceContext->cipherInst), &(DeviceContext->nowKeyInst.keyInstEn), Buffer, BufferLength, tmpBuffer);// > 0)<br /> //{<br /> status = ActualWriteFile(<br /> DeviceContext,<br /> &fileOffset,<br /> tmpBufferSize,<br /> tmpBuffer<br /> );<br /> //}<br /> RETAILMSG(1,(L"blockEncrypt ---- Buffer = %x tmpBuffer = %x/n",Buffer, tmpBuffer));<br /> }<br /> else<br /> {<br /> status = ActualReadFile(<br /> DeviceContext,<br /> &fileOffset,<br /> tmpBufferSize,<br /> tmpBuffer<br /> );<br /> if (status == ERROR_SUCCESS)<br /> {<br /> //int blockDecrypt(cipherInstance *cipher, keyInstance *key,<br /> // BYTE *input, int inputLen, BYTE *outBuffer);<br /> blockDecrypt(&(DeviceContext->cipherInst), &(DeviceContext->nowKeyInst.keyInstDe),<br /> tmpBuffer, tmpBufferSize, Buffer);<br /> //<br /> RETAILMSG(1,(L"blockDecrypt ---- tmpBuffer = %x Buffer = %x/n",tmpBuffer, Buffer));<br /> }<br /> }

MakeAesKey(devContext, &(devContext->nowKeyInst), devContext->mountdetail->UserPassword);

In anthentication, i use user password's SHA1 in register. like this:

HKEY hStorageKey = NULL;<br /> HKEY hProfileKey = NULL;<br /> std::basic_string<TCHAR> strValue;<br /> if (RegOpenKeyEx(HKEY_LOCAL_MACHINE, L"System//StorageManager//Profiles", 0, KEY_WRITE|KEY_READ, &hStorageKey) == ERROR_SUCCESS)<br /> {<br /> DWORD dw;<br /> if (RegCreateKeyEx(hStorageKey, L"SecTest", 0, REG_NONE, REG_OPTION_NON_VOLATILE, 0, 0, &hProfileKey, &dw) == ERROR_SUCCESS)<br /> {<br /> DWORD dwType=REG_NONE;<br /> DWORD dwCount=0;<br /> LONG lResult = RegQueryValueEx(hProfileKey, L"HEX", NULL, &dwType,<br /> NULL, &dwCount);<br /> if (lResult == ERROR_SUCCESS)<br /> {<br /> strValue.resize(dwCount);<br /> lResult = RegQueryValueEx(hProfileKey, L"HEX", NULL, &dwType,<br /> (LPBYTE)strValue.data(), &dwCount);<br /> }<br /> }<br /> if (hProfileKey != NULL)<br /> {<br /> RegCloseKey(hProfileKey);<br /> }<br /> }<br /> if (hStorageKey != NULL)<br /> {<br /> RegCloseKey(hStorageKey);<br /> }<br /> RETAILMSG(1,(L"strValue = %ls/n", strValue.c_str()));<br /> ////////<br /> std::basic_string<TCHAR> strReport;<br /> CSHA1 sha1;<br /> sha1.Update((UINT_8*)devContext->mountdetail->UserPassword, strlen(devContext->mountdetail->UserPassword));<br /> sha1.Final();<br /> sha1.ReportHashStl(strReport, CSHA1::REPORT_HEX_SHORT);<br /> RETAILMSG(1,(L"strReport = %ls/n", strReport.c_str()));<br /> strReport=strReport.substr(0,32);<br /> strValue=strValue.substr(0,32);<br /> if (strReport.compare(strValue))<br /> {<br /> return 0;<br /> }

The most important is XXX_IOControl, we have to

implement our IOCTL_DISK_GETINFO, DISK_IOCTL_GETINFO, IOCTL_DISK_DEVICE_INFO,IOCTL_DISK_READ, DISK_IOCTL_READ, IOCTL_DISK_WRITE, DISK_IOCTL_WRITE, the sample like this:

switch(dwCode)<br /> {<br /> case DISK_IOCTL_INITIALIZED:<br /> RETAILMSG(1, (L"Init!/n"));<br /> break;<br /> case IOCTL_DISK_GETINFO:<br /> *((DISK_INFO*)pBufOut) = devContext->DiskGeometry;<br /> break;<br /> case DISK_IOCTL_GETINFO:<br /> *((DISK_INFO*)pBufIn) = devContext->DiskGeometry;<br /> break;<br /> case IOCTL_DISK_DEVICE_INFO:<br /> RETAILMSG(1, (L"get info!/n"));<br /> *((STORAGEDEVICEINFO*)pBufIn) = devContext->StorageDeviceInfo;<br /> break;<br /> case IOCTL_DISK_READ:<br /> case DISK_IOCTL_READ:<br /> bRet = IOCTL_Std_DiskReadWrite(<br /> devContext,<br /> TRUE,<br /> pBufIn,<br /> dwLenIn,<br /> &outputBufferUsed<br /> );<br /> break;<br /> case IOCTL_DISK_WRITE:<br /> case DISK_IOCTL_WRITE:<br /> bRet = IOCTL_Std_DiskReadWrite(<br /> devContext,<br /> FALSE,<br /> pBufIn,<br /> dwLenIn,<br /> &outputBufferUsed<br /> );<br /> break;<br /> case IOCTL_CHANGE_PASSWORD:<br /> {<br /> CHANGE_PASSWD* pwd = (CHANGE_PASSWD*)pBufIn;<br /> RETAILMSG(1, (L"pwd->OldPassword: "));<br /> for (int i = 0; i < strlen(pwd->OldPassword); ++i)<br /> {<br /> RETAILMSG(1, (L"%c", pwd->OldPassword[i]));<br /> }<br /> RETAILMSG(1, (L"/n"));<br /> MakeAesKey(devContext, &(devContext->oldKeyInst), pwd->OldPassword);<br /> MakeAesKey(devContext, &(devContext->newKeyInst), pwd->NewPassword);<br /> devContext->nowKeyInst.keyInstDe = devContext->oldKeyInst.keyInstDe;<br /> devContext->nowKeyInst.keyInstEn = devContext->newKeyInst.keyInstEn;<br /> }</p> <p> break;<br /> case IOCTL_CHANGE_PASSWORD_FINI:<br /> {<br /> CHANGE_PASSWD* pwd = (CHANGE_PASSWD*)pBufIn;<br /> RETAILMSG(1, (L"pwd->NewPassword: "));<br /> for (int i = 0; i < strlen(pwd->NewPassword); ++i)<br /> {<br /> RETAILMSG(1, (L"%c", pwd->NewPassword[i]));<br /> }<br /> RETAILMSG(1, (L"/n"));<br /> MakeAesKey(devContext, &(devContext->nowKeyInst), pwd->NewPassword);<br /> }<br /> break;<br /> default:<br /> break;<br /> }

Becareful

IOCTL_DISK_GETINFO and DISK_IOCTL_GETINFO are defferent!!

Next, i want implement my owner file system, So it can be more safely and efficiently！ FAT or EXT2？ i do'nt know.